I am having an issue that I think is somehow related to Safari and our proxy. We have had several reports of users traveling off-network and having issues with captive portals. The Captive Network Assistant.app window appears but it's blank and says: "The webpage couldn't be loaded". If I open Chrome or Firefox, and go to https://captive.apple.com then the Captive Portal appears and I can do whatever I need to access the WiFi SSID. If open Safari, I am unable to get to https://captive.apple.com. Has anyone run across this issue? I'm assuming the Captive Network Assistant is using Safari to try to show the Captive Portal... 

The way JAMF displays my inventory requires me to scroll a lot to the right to find information on an asset. I would like to customize the order the columns are displayed. For example, Asset, serial number, building, and then room. Is it possible to change the order of the inventory display?

Hey folks,We migrated from using policies onto using Jamf App Catalog to handle our standardize applications (Google Chrome, Mozilla Firefox, VLC, etc) for auto patching the latest builds and offering the software for workstations without the software to download from Self Service+.We’re looking into configuring Jamf Setup Manager, however since we do not have triggers from policies for software, I’m curious if anyone has found a workaround or best practice for this. I’m interested in hearing your thoughts, workarounds, and recommendations.Thank you,JG

Hello everyone, is there an API Call/Endpoint to disown Devices (ADE) in Jamf School?

How can I make it so after a set amount of time the device goes to a app and the app can not be exited until you fill out a sign in and after the set amount of time it "Signs you out" bringing you back to the form. ThanksIan Nelson

So It seems Apple has removed some MDM control of macOS updates in macOS 27 and they are only allowing using DDM commands to do this.Wanting to now if if the Defer Major macOS updates MDM profile setting will work in macOS 27 or is this gone too? (I would assume that deferring upgrading to 27 will still work since older versions of the OS still support MDM update control. This is more about the future) I see with Jamf 11.29 that the download & schedule install is now DDM and works on prem but what we are really looking for is a way to continue Defer Major macOS updates for 90 days. We are not in Jamf cloud and not really looking to move.

If you’re sorting through WWDC 2026 announcements and trying to figure out what’s actually going to affect Jamf admin work, we’re doing a focused walkthrough on the changes that impact Apple platforms and device management workflows, plus Q&A.When:Friday, June 26 @ 12:00 PM Mountain TimeWhere:https://rocketman.tech/lp-jnAlso on YouTube:https://rocketman.tech/ly-jn

Hello all, I know there have been a couple of topics around this already but I can't seem to find a solid solution for this. We are a university and have both user assigned and public apple computers and laptops. I would like todo one of the following:1. Prevent users from login into their personal apple ID's and lock the devices to only use our ITS apple ID (make sure they can not log out of it).2. Simply block the ability to sign into any apple ID.3. Force sign out users already signed into their personal apple ID's. I have tried to set this up using a configuration profile under Restrictions > Preferences but this does not work (once the profile is applied the section is still visible). I also don't like the restrictions method as this includes many other options I don't want to use (in Applications, Widgets, Media, ect).We are using Jamf PRO and Apple School Manager. Thanks!

Hi all,We have several Mac builds deployed across the University, with the majority of devices using a core “Staff” build within Jamf Pro. When we introduce a new build, we typically create a new PreStage enrolment profile and re-scope existing Macs to that profile. The intention is that if a device is rebuilt or reset at any point during its lifecycle, it will receive the latest build and updated setup experience. I assume this is fairly standard practice, and up until this point, it’s otherwise had no unintended consequences.However, something I’ve noticed this year is that Macs running older builds, but now scoped to a newer enrolment profile, are unexpectedly migrating.I’ve traced this back to the point where the MDM profiles renew on the client. During this process, the value of the following attribute in the computer record appears to be overwritten:Enrollment Method: PreStage enrollment = XXXXWe currently rely on Smart Groups based on this value to scope configuration profiles a

Does anyone have issues when using JRA with the users that have multiple displays?During a session it will swap between displays automatically, even thought I have auto switch monitor turned off.

Cisco Secure Client (CSC): Version 5.1.12.146MacOS: Tahoe 26.5Current issue we are facing is that when enrolling new MacBooks into our environment we are seeing that Cisco Secure Client is no longer passing through deviceID to azure to pass through conditional access policies. Previously our environment was running JAMF conditional access, and our devices were enrolling without a problem. All applications were passing deviceID and going through conditional access policies (CAPs) without any blockers. Recently we have shifted over to platform SSO as per many people’s recommendation as the old method was being deprecated. Since then, we have noticed that most applications are still working without issues, but unfortunately Cisco Secure Client is failing to pass deviceID and is now being blocked by our Azure CAPs. The main difference that I'm seeing is that the previously enrolled devices also received a WJP certificate, while the new enrollment method no longer utilizes this check. We or

Hello Folks,I’d love to get together again and discuss all cool Jamfy stuff, dub dub, and the Golden Gate. Celebrate our wins, discuss challenges, and share fun facts.This time we are traveling to the western suburbs. Those of you close to the Union Station, can hop on the BNSF and get there in a jiffy.DATE:Friday, June 26th, 20265 PM - 8:30 PMLOCATION:Ballydoyle Pub5157 Main St.Downers Grove, ILhttps://maps.apple/p/DRESqcNj9PvqLnhttps://www.ballydoylepub.comLet's support the venue and order from the pub menu (food/drinks).

Today we are releasing Jamf Pro 11.29; highlights include:Simplified Setup for Platform Single Sign-on EnhancementThis feature previously supported only a single workflow configuration where the Single Sign-on Extensions (SSOe) profile installs after the computer is enrolled with Jamf Pro. This enhancement expands the functionality of Simplified Setup for Platform SSO by including an additional workflow configuration where the SSOe profile installs at the beginning of the enrollment process, forcing users to authenticate with your identity provider (IdP) before enrollment completes.Directory Service Group CriteriaNew directory service group criteria are available for smart groups and advanced searches. Smart groups and advanced searches with these criteria use a local cache to store user information obtained from an LDAP server or cloud identity provider (IdP). For additional information on what's included in this release, review the release notes via the Jamf Learning Hub.To access ne

With Jamf Pro 11.29, administrators can strengthen identity-first enrollment with a new Simplified Setup for Platform SSO workflow, scope devices more reliably using native directory service group criteria in smart groups, and enforce software updates via declarative device management on self-hosted instances.Be sure to check out the Jamf Pro release notes for all of the exciting new features and enhancements.Thank you for your continued support and feedback!

We have a lab environment where we explicitly want the screen saver / display timeout to be a specific time, but we don’t want the user to have to re-enter the password when the display wakes / screen saver exits.When we set a Configuration Profile with a Security and Privacy: General payload, we can successfully set Require Passcode to Unlock Screen to enabled and set to a specific time (Immediately, 5 minutes, 8 hours, etc.), and this works as expected.  But when we try setting it to “Never”, the target device updates and reverts to “Immediately”.  I’ve also tried setting it to “Immediately” to see if “Never” and “Immediately” were just swapped in the Jamf UI, but that wasn’t it.I’ve also tried using a plist file in a Application & Custom Settings payload with a domain of com.apple.screensaver as detailed from Apple’s documentation.However, this doesn’t seem to work at all, and the settings don’t seem to take effect.<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist P

Taking a swing at the regex. How is this?macOS 27 Golden Gate (Regex Can't upgrade)^Mac(BookPro1(7|8),\d|(1(4,([5679]|10)|5,([36-9]|1[01])|6,[15-8]|7,[2-9]))|(1([56],1[23]|4,(2|15))|BookAir10,1)|(6,[23]|5,[45])|mini9,1|1(6,1[015])|14,(3|12)|1(3,[12]|4,1(3|4)|5,14|6,9)|14,8)$|^iMac21,[12]$

Has anyone else noticed that custom Self Service branding no longer applies to App Installer / Notification Center notifications?Environment:Jamf Pro (current version) Self Service 11.28.1 macOS Tahoe 26.5.1What I’m seeing:Self Service branding is configured correctly in Jamf Pro. The custom icon appears correctly in the Self Service UI and as the application icon. However, macOS Notification Center notifications (e.g. App Installer update notifications) show the generic Jamf icon instead of our branded icon.Some investigation:Notifications appear under Management Action in System Settings > Notifications. CFBundleIconFile for Self Service points to AppIcon. AppIcon.icns appears to contain the generic Jamf icon. Running selfservice branding brand --icon <path> changes the Dock/Finder icon but does not affect notification icons. The behavior appears to be specific to notifications delivered via Management Action, which is how they appear in System Settings > Notifications.I

I have 2 questions with my Mac management with my on premise Jamf Pro instance.Before news MacOS is launch we would like to block the update while we made a couple of tests with our applications used in my university.What is the best way to block MacOS upgrade and for how long can we block the update? Second questions, After the pre stage enrollement i execute Jamf Setup Manager to install few applications and apply some configurations, i try to execute a script to reboot the computer but after reboot JSM runs again, how could i execute a reboot action after JSM properly?Thank you very much.

Matt Jerome (Senior Engineer, Fanatics) just walked through a few of the major players in the macOS onboarding space at LaunchPad, including a practical look at the leading tools and how each shapes the first-day experience for end users.Full replay and resources:https://rocketman.tech/lr-jn Also on YouTube:https://rocketman.tech/ly-jn Upcoming meetup:https://rocketman.tech/lp-jn 

Pretty sure I know the answer, just doing due diligence at this point.We recently modified our local account password policy where we are actually are now enforcing one. For background, we’ve had a local account password policy for years, but never enforced it. Now we are.We’ve had a number of users who have been presented with the password change dialog, and rather than changing the password have clicked Cancel instead, then keep trying to login with their current password, which has resulted in them getting locked out.The field support team has asked if it's possible to modify the text in the PW change dialog in some way to help people understand that the pw change is not really optional.I didn't think there was, and I haven’t found anything to suggest otherwise, but thought I’d check in here to see if anyone has any suggestions.

We purchased some M5 MacBook Airs with Tahoe with 26.2 installed and when we deploy them to a new staff person, they are required run a macOS update despite the fact we have the minimum required macOS version in the prestage set to “no enforcement”.  I don’t think this was happening in previous macOS’es.This just prolongs the onboarding process.

I was struggling with targeting a Web Clip in Single App mode for some iPads. I found several articles saying you couldn’t do it until I found a Jamf article saying that it was possible but, only by targeting the specifc bundle ID of the Web Clip.https://support.jamf.com/en/articles/13274571-configuring-single-app-mode-for-web-clips-in-jamf-proThis sounded great and I thought my search was over. However, this didn’t work. It made sense though, targeting the specific payload identifier should work. So, after much testing I discovered the following with regard to targeting a web clip in single app mode:1. There can only be a SINGLE web clip profile with a single web clip payload deployed to the iPad. I chose full screen but, it might not matter.2. The Single App profile MUST use the standard "com.apple.webapp" bundle ID.That's it. If you do those two things, the single web clip will present in Single App mode.Good Luck!  

🎉 Chennai, it’s your turn!  We’re excited to announce the first-ever Mac Admins India Meetup in Chennai! Mac Admins India has been bringing together Apple IT professionals across the country, and we’re thrilled to host our inaugural Chennai meetup. Join us for an evening of networking, knowledge sharing, and conversations with fellow Apple admins and IT professionals. 📅 June 22, 2026🕕 6:00 PM onwards📍 WeWork Olympia Cyberspace, Guindy, Chennai01G SIDCO Industrial Estate, Chennai, TN 600032(Opposite to Kalaignar Hospital)\ Whether you’re managing Macs, iPhones, and iPads, working with Jamf, Intune, Kandji, Mosyle, or supporting Apple devices in the enterprise, this meetup is a great opportunity to connect with the local Apple IT community. 📝 Register now: https://forms.gle/FASFrdELzbNZ1RiM8 🎤 Interested in sharing your experience, a project, automation, security topic, or Apple management best practice? We’re also looking for community speakers. Let us know in the registration for

Hi everyone, I. HATE. PRINTERS. That being said, we have to work with them.  and... Canon does not make it easy. Here is what I was able to find out from several places online, in order to get this "installer" to actually work. So let's jump on to our Macs and get this over with.Downloading the "Installer"1. Log into your Uniflow Online (web)2. Start Printing (Side Bar)3. Install Printer Driver > Click [Download macOS printer driver] Navigate to Download FolderOpen SmartClientMac.iso > Open SmartClientMac Volume > Notice here you only have 1 file. But actually there are 4. 3 are hidden.On your Keyboard us the show hidden files shortcut: Command+Shift+.(Period)Getting Files in the Right LocationYou will now see 3 other files. We only need the SmartClientForMac.pkg and tenantcfg.plist files.Next, Go to Finder > Go > Go to Folder (Shift+Command+G)Enter 'private/tmp'Next create a new folder called 'uniflowclient'Which is now located in private/tmp/un

Hey Jamf Nation 👋🏼,JNUC is almost here, and we want to get to know you!Whether you're attending for the first time or coming back for another year, drop a comment below and tell us:• Where are you joining from?• Is this your 1st, 3rd or 10th JNUC?• What are you most looking forward to at JNUC this year?This is your chance to connect with fellow attendees before the event. Meet your people, find session buddies, and start the conversation here.We can't wait to see you all there 🙌🏼!